sync-feedback
Facilitates the review and synchronization of feedback captured during sessions to Product Forge, enhancing product development workflows.
Install this skill
Security score
The sync-feedback skill was audited on Feb 28, 2026 and we found 11 security issues across 2 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 64 | ```bash |
Access to hidden dotfiles in home directory
| 31 | All feedback is stored in `~/.claude/learnings/`: |
Access to hidden dotfiles in home directory
| 34 | ~/.claude/learnings/ |
Access to hidden dotfiles in home directory
| 69 | - Find all unprocessed sessions in `~/.claude/learnings/sessions/` |
Access to hidden dotfiles in home directory
| 89 | 1. **Read statistics** from `~/.claude/learnings/stats.json` |
Access to hidden dotfiles in home directory
| 91 | 2. **Read projects** from `~/.claude/learnings/projects.json` |
Access to hidden dotfiles in home directory
| 93 | 3. **Count pending items** by scanning `~/.claude/learnings/projects/*/feedback/**/*.md` |
Access to hidden dotfiles in home directory
| 122 | find ~/.claude/learnings/projects -name "*.md" -path "*/feedback/*" |
Access to hidden dotfiles in home directory
| 150 | - **Dismiss**: Move to `~/.claude/learnings/synced/dismissed/` |
Access to hidden dotfiles in home directory
| 169 | grep -l "status: reviewed" ~/.claude/learnings/projects/*/feedback/**/*.md |
Access to hidden dotfiles in home directory
| 204 | 4. **After export**, move items to `~/.claude/learnings/synced/` |